CVE-2020-0230

🗓️ 17 Jul 2020 20:11:21Reported by google_androidType

cve🔗 web.nvd.nist.gov👁 177 Views🌐 WEB

Possible out of bounds write in Android SoC, CVE-2020-023

Reporter	Title	Published	Views	Family All 12
0day.today	Apache Struts 2.5.20 - Double OGNL evaluation Exploit	17 Nov 202000:00	–	zdt
Android Security Bulletins	Android Security Bulletin—July 2020Stay organized with collectionsSave and categorize content based on your preferences.	6 Jul 202000:00	–	androidsecurity
CNVD	Google Android MediaTek Component Buffer Overflow Vulnerability	7 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-0230	17 Jul 202020:11	–	cvelist
Exploit DB	Apache Struts 2.5.20 - Double OGNL evaluation	17 Nov 202000:00	–	exploitdb
EUVD	EUVD-2020-1733	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Samsung Mobile	3 Sep 202000:00	–	ncsc
NVD	CVE-2020-0230	17 Jul 202021:15	–	nvd
OSV	ASB-A-156337262	1 Jul 202000:00	–	osv
Packet Storm	Apache Struts 2.5.20 Double OGNL Evaluation	17 Nov 202000:00	–	packetstorm

NVD

Node

google androidMatch-

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android SoC"
      }
    ]
  }
]

Source	Link
source	www.source.android.com/security/bulletin/2020-07-01

Parameter	Position	Path	Description	CWE
foo	request body	index.action	Out-of-bounds/OGNL injection risk via crafted multipart form-data payload enabling remote code execution (S2-059 related).	CWE-787

21 Nov 2024 04:53Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 3.19.8

EPSS0.00147

CWE-787